Privacy Policy

Whempify Marketing, LLC ("Whempify," "Company," "we," "our," or "us") respects your privacy and is committed to protecting your information.

This Privacy Policy explains how we collect, use, process, disclose, store, retain, and protect information obtained through the Whempify platform, website, applications, software, dashboards, analytics tools, predictive scoring systems, reports, APIs, and related services (collectively, the "Services").

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

Information You Provide

We may collect information you voluntarily provide, including:

• Name
• Company name
• Business address
• Email address
• Telephone number
• Account credentials
• Billing information
• Subscription information
• Customer support communications
• Uploaded files
• CRM data
• Lead information
• Customer records
• Prospect records
• Business information
• Marketing information
• Sales information

Automatically Collected Information

We may automatically collect:

• IP address
• Browser type
• Device information
• Operating system
• Referring websites
• Usage data
• Session data
• Clickstream data
• Log data
• Geographic region
• Pages viewed
• Features utilized
• Error reports

Cookies and Similar Technologies

We use:

• Cookies
• Analytics technologies
• Session technologies
• Tracking technologies
• Performance monitoring tools

These technologies help us improve functionality, analyze usage patterns, maintain security, and enhance user experience.

We may use information for:

• Providing Services
• Creating user accounts
• Authenticating users
• Processing payments
• Operating subscriptions
• Delivering analytics
• Generating Whempify Scores
• Producing forecasts
• Producing heat maps
• Performing predictive analysis
• Customer support
• Service maintenance
• Security monitoring
• Fraud prevention
• Product development
• Feature development
• Internal analytics
• Business operations
• Legal compliance
• Enforcing agreements

Users may upload CRM information, including:

• Leads
• Prospects
• Customers
• Contact records
• Business records
• Sales information
• Marketing information

"Customer Data" means any information, records, content, files, CRM data, lead information, prospect information, customer information, marketing information, sales information, or other materials submitted to the Services by or on behalf of Customer.

You retain ownership of your CRM Data.

Whempify processes CRM Data solely to:

• Provide Services
• Generate analytics
• Produce predictive scores
• Improve functionality
• Maintain security
• Troubleshoot issues
• Develop new features
• Generate aggregated and anonymized information

Whempify does not sell Customer CRM Data.

Customer shall not upload, transmit, store, or otherwise provide through the Services any information that is subject to specialized legal or regulatory protections unless expressly authorized in writing by Whempify, including but not limited to:

• Protected Health Information (PHI) subject to HIPAA
• Medical records
• Payment card information
• Bank account information
• Government-issued identification numbers
• Social Security numbers
• Biometric information
• Sensitive personal information requiring enhanced legal protections

Customer acknowledges that the Services are not designed, intended, or represented as compliant with HIPAA, PCI-DSS, GLBA, or similar regulatory frameworks.

Customer assumes sole responsibility for any prohibited data submitted to the Services.

The Services utilize:

• Artificial intelligence
• Machine learning
• Predictive analytics
• Statistical models
• Forecasting systems
• Automated scoring systems

Information provided to the Services may be processed by these technologies to generate:

• Whempify Scores
• Predictions
• Forecasts
• Heat maps
• Business intelligence reports
• Recommendations

AI-generated outputs may not always be accurate, complete, or current and should not be relied upon as the sole basis for business decisions.

Customer Data, CRM Data, and aggregated, anonymized, or de-identified information may be analyzed and processed by Whempify to improve predictive models, scoring methodologies, forecasting systems, analytics, recommendations, benchmarking, product development, and overall Service functionality.

Whempify does not sell Customer CRM Data and does not intentionally permit Customer Data to be used to train publicly available third-party artificial intelligence models.

WHEMPIFY MAKES NO REPRESENTATION OR WARRANTY REGARDING THE ACCURACY, COMPLETENESS, TIMELINESS, RELIABILITY, OR SUITABILITY OF ANY SCORE, FORECAST, RECOMMENDATION, REPORT, HEAT MAP, PREDICTION, ANALYSIS, OR OTHER OUTPUT GENERATED BY THE SERVICES.

CUSTOMERS ARE SOLELY RESPONSIBLE FOR THEIR BUSINESS DECISIONS AND SHOULD EXERCISE INDEPENDENT BUSINESS JUDGMENT BEFORE RELYING UPON ANY OUTPUT GENERATED BY THE SERVICES.

The Services may incorporate information from:

• Government agencies
• Census data
• Weather services
• Mapping providers
• Public databases
• Commercial data providers
• Artificial intelligence providers
• Analytics providers

We do not control or guarantee the accuracy of third-party data.

Payments are processed through third-party payment processors, including Stripe.

Whempify does not store complete payment card information on its servers.

Payment information is governed by the applicable payment processor's privacy policies and security practices.

We may share information with:

Service Providers

Including providers of:

• Hosting
• Cloud infrastructure
• Analytics
• Security
• Email delivery
• Customer support
• Payment processing

Legal Requirements

We may disclose information if we believe disclosure is necessary to:

• Comply with legal obligations
• Respond to lawful requests
• Protect rights
• Investigate fraud
• Protect users
• Protect public safety

Business Transactions

Information may be transferred as part of:

• Merger
• Acquisition
• Asset sale
• Financing
• Corporate restructuring

Customer acknowledges that information may be processed, stored, transmitted, and maintained in the United States where Whempify, its affiliates, service providers, cloud providers, or infrastructure providers maintain facilities or operations.

Whempify may create and use aggregated, anonymized, and de-identified information derived from Customer Data.

Such information

Does not identify individual users

Does not identify individual customers

May be used for analytics

May be used for benchmarking

May be used for product development

May be used for improving Services

Whempify does not sell Customer CRM Data, Customer contact information, lead information, prospect information, customer records, or other Customer Data to data brokers, list brokers, lead marketplaces, advertisers, or unrelated third parties for independent marketing purposes.

Aggregated, anonymized, benchmark, statistical, analytical, scoring, forecasting, trend, and de-identified information generated through the operation of the Services shall be owned exclusively by Whempify and may be used for any lawful business purpose. Such ownership rights shall survive termination of any account, subscription, or agreement with Customer.

We retain information for as long as reasonably necessary to:

• Provide Services
• Maintain accounts
• Comply with legal obligations
• Resolve disputes
• Enforce agreements
• Maintain backups
• Maintain security records
• Prevent fraud

Information may remain in backups, archives, logs, and disaster recovery systems after deletion from active systems.

Upon verified request and subject to legal, contractual, security, backup, archival, dispute-resolution, fraud-prevention, and compliance obligations, Whempify will use commercially reasonable efforts to delete Customer Data from active production systems within a reasonable period of time.

Certain information may remain in backup systems, disaster recovery systems, logs, archives, and security records for longer periods.

We implement commercially reasonable administrative, technical, and organizational safeguards designed to protect information.

However:

NO INTERNET TRANSMISSION, SOFTWARE PLATFORM, DATABASE, CLOUD SERVICE, OR SECURITY PROGRAM CAN BE GUARANTEED TO BE 100% SECURE.

Accordingly, Whempify cannot guarantee absolute security.

If we become aware of a security incident affecting personal information, we may:

• Investigate the incident
• Mitigate risks
• Take corrective action
• Provide notices where required by law

Nothing in this Privacy Policy guarantees that a security incident will never occur.

You may:

• Update account information
• Modify certain profile information
• Cancel subscriptions
• Request account closure

Certain information may be retained as permitted or required by law.

Customer represents and warrants that it is a business organized, operated, and conducting business within the United States.

Whempify and its Services may not be used by foreign governments, foreign governmental agencies, foreign state-owned enterprises, businesses organized under the laws of a foreign jurisdiction, or businesses primarily operating outside the United States.

The Services are intended solely for lawful business activities conducted within the United States. Whempify reserves the right to deny, suspend, terminate, or restrict access to any account that Whempify reasonably believes is operated from, owned by, controlled by, or primarily conducting business outside the United States.

Any person or entity accessing the Services from outside the United States does so without authorization and at their own risk.

Whempify reserves the right to investigate, verify, restrict, suspend, or terminate access where Whempify determines that a Customer does not satisfy the U.S.-only eligibility requirements.

Customer represents and warrants that it is not located in, organized under the laws of, owned by, controlled by, or acting on behalf of any country, government, entity, or person subject to U.S. economic sanctions, export restrictions, trade restrictions, or embargoes.

Customer shall not use the Services in violation of any applicable United States export control, sanctions, or trade compliance laws.

Whempify reserves the right to immediately suspend or terminate access upon reasonable belief of any violation of this section.

The Services are intended solely for business use.

The Services are not directed to children under 18 years of age.

We do not knowingly collect personal information from children.

Depending on your state of residence, you may have rights under applicable privacy laws, including rights to:

• Access information
• Correct information
• Delete information
• Request information regarding disclosures

Requests may be submitted to:

• Help@WhempifyMarketing.com

We reserve the right to verify identity before processing requests.

Residents of certain U.S. states may be entitled to additional privacy rights under applicable state privacy laws, including but not limited to the California Consumer Privacy Act ("CCPA"), California Privacy Rights Act ("CPRA"), Virginia Consumer Data Protection Act ("VCDPA"), Colorado Privacy Act ("CPA"), Connecticut Data Privacy Act ("CTDPA"), Utah Consumer Privacy Act ("UCPA"), and other similar laws that may become effective from time to time.

To the extent applicable law grants such rights, eligible individuals may have the right to:

Request access to personal information collected about them.

Request correction of inaccurate personal information.

Request deletion of personal information, subject to applicable exceptions.

Request information regarding categories of personal information collected.

Request information regarding categories of third parties with whom information has been shared.

Obtain a portable copy of certain personal information.

Opt out of certain forms of targeted advertising where required by law.

Opt out of certain profiling activities where required by law.

Whempify does not sell personal information for monetary consideration.

Whempify does not knowingly process sensitive personal information for purposes requiring additional consent under applicable law.

Whempify reserves the right to verify the identity and authority of any individual submitting a privacy rights request prior to processing such request.

By using this Service, Customer acknowledges and accepts the inherent risks associated with electronic storage, cloud computing, internet communications, and cybersecurity threats.

Any privacy rights request may be submitted to:

• Help@WhempifyMarketing.com

Whempify may deny requests where permitted by applicable law, including where compliance would impair security, violate legal obligations, interfere with contractual obligations, compromise trade secrets, or otherwise fall within a statutory exception.

Nothing contained in this Privacy Policy shall expand any privacy rights beyond those expressly required by applicable law.

Whempify may use:

• Google Analytics
• Advertising measurement tools
• Website performance tools
• Marketing analytics technologies

These services may collect information regarding website usage and interactions.

Users may manage certain preferences through browser settings and applicable provider tools.

Customer acknowledges and agrees that Whempify's Services are designed for business users and may involve the collection, upload, storage, processing, analysis, transmission, and use of business-related contact information and customer relationship management data.

By using the Services and uploading Customer Data, CRM Data, lead information, prospect information, customer information, contact records, marketing records, sales records, or related business information, Customer expressly authorizes Whempify to process such information as necessary to:

Provide the Services.

Generate predictive analytics.

Generate Whempify Scores.

Produce reports, forecasts, rankings, and recommendations.

Improve Service functionality.

Maintain platform security.

Troubleshoot technical issues.

Detect fraud and abuse.

Develop and improve products and features.

Generate aggregated, anonymized, and de-identified analytics.

Customer represents and warrants that:

Customer has obtained all rights, permissions, authorizations, notices, and consents required by applicable law to provide such information to Whempify.

Customer possesses a lawful basis to collect and process such information.

Customer has complied with all applicable privacy, consumer protection, telemarketing, marketing, and data protection laws.

Customer will maintain all records necessary to demonstrate compliance with applicable law.

Customer acknowledges that Whempify acts solely as a software, analytics, and business intelligence provider and does not independently determine the legality, ownership, accuracy, completeness, or lawfulness of Customer Data or CRM Data uploaded by Customer. Whempify is not acting as Customer's agent, broker, representative, fiduciary, or legal advisor.

Customer shall remain solely responsible for all Customer Data and CRM Data submitted to the Services.

To the fullest extent permitted by law, Customer agrees to defend, indemnify, and hold harmless Whempify from and against any claims, investigations, regulatory actions, fines, penalties, liabilities, damages, costs, or expenses arising from Customer's collection, use, disclosure, storage, transmission, processing, or upload of business contact information, lead information, prospect information, customer information, or CRM Data.

Whempify Intelligence ("Whempify," "we," "us," or "our") allows customers to connect advertising and direct-mail accounts, including Google Ads, Meta advertising products, and Lob print-and-mail services.

This section explains what information we access, how we use it, when we share it, and the controls available to customers.

1. Information We Collect

When you connect or use an advertising or direct-mail integration, we may collect or process the following categories of information.

Account and Authorization Information

• Platform account identifiers
• Advertising account and manager account identifiers
• OAuth authorization and refresh tokens
• API credentials or connection status
• Account names, permissions, currency, time zone, and configuration information
• Dates and times when an account was connected, updated, or disconnected

We do not request or store your third-party platform password. Authentication is handled through the applicable platform's authorization process whenever OAuth is available.

Campaign Information

• Campaign names, objectives, types, status, and dates
• Campaign budgets and budget periods
• Geographic targets, ZIP codes, and service areas
• Keywords and negative keywords
• Audiences and targeting selections
• Advertisements, headlines, descriptions, images, videos, logos, and calls to action
• Landing-page and destination URLs
• Campaign approvals, legal confirmations, and publication history
• External campaign, ad group, advertisement, and budget identifiers

Campaign-Performance Information

Depending on the connected platform and permissions granted, we may access:

• Impressions
• Clicks
• Advertising cost
• Conversions
• Conversion value
• Campaign and advertisement status
• Budget and delivery information
• Other campaign-performance and attribution metrics made available by the platform

Whempify's Marketing Performance features are intended to use campaigns created or managed through Whempify, together with customer-entered campaign information where manual reporting is necessary.

Direct-Mail Information

When you create a Lob print-and-mail campaign, we may process:

• Recipient names
• Business or residential mailing addresses
• Return addresses
• Mailing-list and suppression information
• Mailpiece designs, images, copy, offers, and disclaimers
• Mailing quantities, formats, postage classes, and production instructions
• Address-verification results
• Mailpiece status, delivery status, returned-mail information, and campaign cost

Do not provide mailing information unless you have the legal right and a valid business purpose to use it.

2. Google User and Advertising Data

When you connect Google Ads, Whempify requests authorization to access and manage permitted Google Ads information on your behalf.

Depending on the features you use, Whempify may:

• Identify Google Ads accounts you are authorized to access
• Read campaign, account, budget, and performance information
• Create campaigns, budgets, targeting criteria, ad groups, assets, and advertisements
• Retrieve campaign status and performance metrics
• Store the Google Ads identifiers needed to maintain campaign records
• Refresh your authorization so the integration remains connected

Whempify uses Google information only to provide and secure the Google Ads features requested by the user, maintain campaign records, display reporting, troubleshoot integrations, and comply with legal or platform requirements.

Whempify does not:

• Sell Google user data
• Use Google user data for targeted advertising unrelated to the customer's requested campaigns
• Use Google user data to build unrelated advertising profiles
• Transfer Google user data to data brokers
• Allow humans to read Google user data except when necessary for security, support, legal compliance, or with the user's affirmative permission
• Use connected Google Ads data to train a generalized artificial-intelligence model

Whempify's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its applicable Limited Use requirements.

3. Meta Advertising Information

When you connect a Meta business or advertising account, Whempify may process information made available through Meta's APIs, including:

• Business and advertising account identifiers
• Facebook Page and Instagram account identifiers
• Campaign, ad set, advertisement, creative, audience, pixel, dataset, or conversion identifiers
• Campaign settings, budgets, targeting, placement, and status
• Advertising content and creative assets
• Campaign-performance and conversion information
• OAuth authorization information and granted permissions

We use this information to provide the Meta advertising features you request, including account connection, campaign planning, campaign creation, campaign management, reporting, and troubleshooting.

If Whempify later supports Meta Pixel, Conversions API, offline conversions, customer lists, or similar tools, the Service may process customer event information or contact information for measurement and matching. We will provide additional notice before activating those features.

You must not provide Meta with information that is prohibited by Meta's terms, including information you know or reasonably should know concerns children under 13 or includes prohibited sensitive information.

Meta's processing of information is governed by its own terms and privacy policies, including the Meta Business Tools Terms.

4. Lob Print-and-Mail Information

When you approve a Lob direct-mail campaign, Whempify may transmit information to Lob for address verification, printing, postage, mailing, tracking, and related fulfillment.

Information transmitted to Lob may include:

• Recipient and return-address information
• Mailpiece content and creative assets
• Mailing format and quantity
• Postage and delivery selections
• Campaign and customer reference identifiers
• Information necessary to calculate costs, verify addresses, and track production

Lob and its service providers may process this information to print, prepare, route, and deliver mailpieces. Physical-mail delivery may also involve the United States Postal Service and other delivery providers.

Lob's standard data-retention practices may differ from Whempify's. Lob states that standard mailpiece data is generally retained for a limited period, subject to account settings, contractual requirements, and applicable law. Review Lob's Privacy Policy and Lob's data-retention information for current details.

5. How We Use Integration Information

Whempify may use advertising and direct-mail information to:

• Authenticate and maintain platform connections
• Provide requested campaign-planning tools
• Generate editable recommendations using artificial intelligence
• Create and manage campaigns after customer approval
• Submit approved print-and-mail orders
• Display campaign status and performance
• Calculate campaign-level metrics and marketing insights
• Prevent duplicate campaign publication
• Maintain approval and publication records
• Diagnose errors and provide customer support
• Detect fraud, abuse, unauthorized access, and security threats
• Comply with applicable laws, platform rules, legal process, and contractual obligations
• Enforce our Terms of Service

We do not enable a campaign solely because artificial intelligence recommends it. Customers must review and approve campaign content and settings before submission.

6. Artificial Intelligence

Whempify may use artificial intelligence service providers to help generate campaign plans, advertising copy, keywords, geographic recommendations, creative directions, or images.

Information submitted for AI processing may include:

• Company profile information
• Campaign instructions
• Budget and campaign objective
• Service area and selected ZIP codes
• Non-sensitive campaign content
• Creative instructions
• Market-intelligence information

Unless separately disclosed and authorized, Whempify does not send connected Google Ads performance data, OAuth tokens, API credentials, recipient mailing lists, or raw personal contact information to an AI model for generalized training.

AI output may be inaccurate or incomplete. Customers must review and approve it before use.

7. When We Share Information

Advertising and Fulfillment Platforms

We share information with Google, Meta, Lob, and related providers when necessary to perform an action requested by the customer.

Infrastructure and Service Providers

We may use providers that supply hosting, databases, authentication, security, monitoring, customer support, analytics, or AI services. These providers may process information only as necessary to provide their contracted services to Whempify.

Current or anticipated providers may include Supabase, Vercel, OpenAI, Google, Meta, Microsoft, Lob, Stripe, and similar service providers.

Legal and Safety Purposes

We may disclose information when reasonably necessary to:

• Comply with law, regulation, subpoena, court order, or other legal process
• Protect the rights, safety, and security of Whempify, our customers, or others
• Investigate fraud, abuse, security incidents, or violations of our agreements
• Respond to lawful requests from government authorities
• Establish, exercise, or defend legal claims

Business Transfers

Information may be disclosed as part of a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar business transaction, subject to applicable law.

We do not sell connected advertising-account credentials, OAuth tokens, campaign data, or recipient mailing lists.

8. Authorization Tokens and Security

Whempify may store OAuth refresh tokens or API credentials so connected integrations can continue operating without requiring authorization for every request.

We use technical and organizational safeguards designed to protect these credentials, including:

• Encryption of supported credentials at rest
• Restricted server-side access
• Authentication and authorization checks
• Separation between customer accounts
• Secure transport using HTTPS
• Logging and monitoring intended to detect misuse

No system is completely secure. We cannot guarantee that unauthorized access, loss, misuse, or alteration will never occur.

You are responsible for securing your Whempify account, platform accounts, devices, and login information and for notifying us promptly of suspected unauthorized access.

9. Retention

We retain integration information only for as long as reasonably necessary to:

• Provide the requested Service
• Maintain campaign and approval records
• Meet accounting, security, legal, and contractual obligations
• Resolve disputes
• Enforce our agreements

Disconnecting an advertising account deletes or disables the stored connection credential used by Whempify, but it may not immediately delete:

• Campaigns or advertisements already created in the platform
• Campaign publication and approval records
• Aggregated performance information
• Records we must retain for legal, security, billing, or audit purposes
• Information retained in limited-duration backups

Platform providers may retain information according to their own policies.

10. Disconnecting an Integration

You may disconnect a supported integration through Whempify's settings or through the applicable platform.

Disconnecting an integration:

• Stops Whempify from making new authorized API requests after the disconnection is processed
• Does not automatically pause or delete campaigns already present in the third-party account
• Does not cancel advertising charges, printing, postage, or mail already submitted for production
• Does not necessarily delete information retained independently by Google, Meta, Lob, USPS, or another provider

You should confirm campaign and billing status directly through the applicable platform after disconnecting.

11. Data Deletion Requests

You may request deletion of your Whempify account and associated information by using the account controls provided by the Service or by contacting:

Email: Help@WhempifyMarketing.com

Your request should identify the Whempify account involved. We may need to verify your identity and authority before processing the request.

Following a verified request, we will delete or de-identify eligible information, subject to information we must retain for legal, fraud-prevention, security, contractual, accounting, or dispute-resolution purposes.

Deleting information from Whempify does not necessarily delete information maintained independently by connected platforms. You may need to submit a separate request to Google, Meta, Lob, or another provider.

12. Customer Responsibilities

Customers are responsible for:

• Providing legally adequate privacy notices to their own customers and prospects
• Obtaining all required consents and permissions
• Establishing a lawful basis for processing personal information
• Honoring opt-out, suppression, unsubscribe, and deletion requests
• Using only mailing lists and audience data they are authorized to use
• Complying with advertising, privacy, direct-mail, telemarketing, consumer-protection, and industry-specific laws
• Avoiding the submission of unnecessary sensitive information

Whempify is not intended for uploading medical information, financial account credentials, Social Security numbers, government identification numbers, information about children, or other highly sensitive personal information.

13. Third-Party Platforms

Google, Meta, Lob, USPS, and other third-party services operate independently from Whempify. Their collection and processing of information are governed by their own privacy policies and terms.

Whempify is not responsible for a third party's independent privacy practices, security, availability, or retention policies.

14. Changes to Integration Practices

We may update this Privacy Policy when integrations, data uses, or legal requirements change.

If we materially change how we use information obtained from a connected platform, we will provide notice as required by law and, where required, request additional consent before applying the new use to previously collected information.

15. Contact Us

Questions or requests concerning this Privacy Policy may be directed to:

Whempify Marketing, LLC

Privacy email: Help@WhempifyMarketing.com

Website: https://whempify.com

Application: https://whempifyintelligence.com

We may modify this Privacy Policy at any time.

Updated versions will be posted on the Services.

Continued use of the Services after updates constitutes acceptance of the revised Privacy Policy.

Whempify Marketing, LLC Florida Limited Liability Company

Email: Help@WhempifyMarketing.com

Website: www.Whempify.com

Questions regarding this Privacy Policy may be directed to the contact information above.